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The essential operations of a quantum computer can be 
accomplished using solely optical elements, with different po- 
larization or spatial modes representing the individual qubits. 
We present a simple all-optical implementation of Grover's 
algorithm for efficient searching, in which a database of four 
elements is searched with a single query. By 'compiling' the 
actual setup, we have reduced the required number of opti- 
cal elements from 24 to only 12. We discuss the extension to 
larger databases, and the limitations of these techniques. 

1. Introduction 

It is now well-known that quantum computation, if 
implementable, could enable tremendous improvements 
over traditional computing methods for certain types of 
problems, such as factoring large numbers into primes 
jij, and efficiently searching a database Thus far, 
the implementation of actual algorithms has been lim- 
ited to schemes employing bulk NMR methods J|,§|, al- 
though basic gate operations have also been performed 
using cooled ions g and also cavity QED methods ||. 
To date there have been a number of discussions on the 
implementation of basic quantum operations using purely 
optical methods [(7^jTT| . The central idea is that individ- 
ual qubits can be represented by different polarization 
or spatial-mode degrees of freedom. The difference from 
a genuine quantum computer with distinct entangleable 
registers is that the optical implementation requires a 
number of elements which grows exponentially with the 
number of qubits. Nevertheless, as we shall sec, it is pos- 
sible to 'compile' the circuits, allowing one to easily real- 
ize and test nontrivial algorithms involving several bits. 
One conclusion of this approach is that a quantum com- 
puter is essentially a (complicated) interferometer jig ]. 

As shown in , with this representation all the basic 
circuit elements of quantum computation can be accom- 
plished using only linear passive optical elements. This 
includes the Controlled Not (CNOT) gate, which en- 
tangles different bits, and the simpler Walsh-Hadamard 
(WH) transform: 0^ (0+1) /y/2 and l-> (0-l)/\/2. For 
the present work we shall only need the latter, in addi- 
tion to the ability to apply various phase shifts on the 
bits. If one considers a qubit based on the polarization 
degree-of-freedom, where horizontal (H) and vertical (V) 
polarization represent and 1, respectively, then the WH 
transformation can be accomplished with a half wave- 
plate (HWP) oriented at 22.5° to the horizontal. Simi- 
larly, a simple 50-50 beamsplitter (BS) performs the WH 
transform on a right-propagating spatial mode (= 0) and 



an upward-propagating spatial mode (=1), after two ex- 
tra phase shifters are included []. We will now describe 
how a nontrivial quantum circuit - Grover's algorithm 
for efficiently searching a database - may be constructed 
using these elements. 

2. Grover's Search Algorithm 

2.1. General Description 

Consider a database of N elements (e.g., a list of integers) 
exactly one of which is 'marked' as satisfying some desir- 
able characteristic (e.g., is a prime number). Typically, 
one would expect to have to look at and test roughly half 
the database (making ~ N/2 'queries' on average) before 
locating this element. Grover's algorithm uses the paral- 
lelism afforded by quantum superposition to accomplish 
the task with only ~ ^/N queries. Since it is described in 
detail elsewhere ||,|],|l3|], here we present without proof 
the necessary steps. Enough qubits are input to the com- 
puter to encode the elements of the database — n qubits 
suffice for a 2™-element database. To initialize the com- 
puter, a WH transformation is performed on each qubit 
individually, thereby preparing the overall state into an 
equal superposition of each of the database elements, e.g., 
(| 00) + |01) + 1 10) + |ll))/2. Next, an 'Oracle" simulta- 
neously examines all database elements, and marks one 
(or more) of them with a n phase-shift. In general, the 
Oracle might perform some computation on each element 
(e.g., test whether it is prime), and mark only that ele- 
ment which yielded a certain result (e.g., 'prime"). For 
our proof-of-principle demonstration, the Oracle merely 
marks one element of the database (e.g., the state |01) if 
the second element is the desired one), while leaving the 
others unchanged. Viewed as a computation, our Oracle 
accepts a user-specified input (e.g., '2'), and marks which 
database element matches that number. 

Finally, a series of transformations accomplish the 'in- 
version about the mean' operation at the heart of the 
amplitude-enhancement technique introduced by Grover 
These are: (1) apply a second WH transformation 
to each bit; (2) apply a ir phase-shift to all but the first 
element ( 1 00) ) of the database; and (3) again apply a fi- 
nal WH transform to each bit. The net result of these 



x The BS transformations are well-known: a — > (a + ib)/y2; 
b — > (ia + 6)/v2- A — 7r/2 phase shift in the b mode before 
and after the BS yields the WH transform jlOl. 



1 



last three operations is to transfer some of the amplitude 
from the non-special elements to the marked one. Re- 
markably, for N — A (i.e., a 2-bit database), all of the 
amplitude is transferred to the desired element in a sin- 
gle run of the quantum circuit. In general for larger N, 
running the circuit ~ tt^/N /8 times will lead to a final 
state in which the magnitude of the marked element's 
amplitude is greater than 1 / \[2 - a measurement on the 
system will then yield this element more than half the 
time Jl4| . For our experiment we focused on the simplest 
case of a 2-bit, 4-element database. Below we discuss the 
extension to more bits. 
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FIG. 1. Grover's technique for efficiently searching a 
database, (a) A one-to-one optical implementation of the 
circuit, for the case of n=2 bits (one represented by polar- 
ization and the other by spatial mode.) All half waveplates 
(HWP) are oriented at 22.5°. (b) A 'compiled' version of the 
algorithm, where many of the components have been consol- 
idated. The first and second HWPs are at 22.5° and 45°, 
respectively. 

2.2. Optical Coding 

Figure la shows the optical layout corresponding to a 
direct 1-to-l implementation of Grover's algorithm, in 
which each operation is implemented independently. A 
HWP oriented at 22.5° performs the initial WH trans- 
formation on the polarization bit, while the WH trans- 
formation on the spatial-mode bit is performed by the 
first 50-50 BS and the — 7r/2 phase shifter in the reflected 
path. The oval represents the Oracle. Below we will 
discuss a practical implementation of this device; for the 



moment consider simply inserting a waveplate in the spa- 
tial path a or 6, which depending on its orientation gives 
a 7r phase shift to either H or V-polarization - the Oracle 
can thus flip the sign of any one of the database elements 
| off), \aV), \bH), or \bV). For example, if the second 
element is the marked one, the state of the system after 
the Oracle is given by (\aH) - \aV) + \bH) + \bV))/2 = 
(|00)-|01) + |10) + |ll))/2. Note that this is an entangled 
state of the two qubits - it cannot be factorized into a 
product of a term involving only the polarization and a 
term involving only the spatial path. 

The first WH transformation of the 'inversion-about- 
the-mean' subroutine on the polarization bit is again ac- 
complished by HWP's, and on the spatial mode by com- 
bining paths a and b on a second 50-50 BS (with asso- 
ciated -7r/2 phase shifters). The minus sign on all but 
the |00)(= \a'H)) element is obtained by a 7r-phase shift 
thickness of non-bircfringcnt glass in path b' (or by sim- 
ply lengthening path b' by A/2), and a half waveplate 
in path a', oriented with its fast axis horizontal (and la- 
belled '7Ty' in figure la). The final WH transformations 
are again produced with HWP's and a 50-50 BS. We ex- 
amine each of the outputs with a polarizing beamsplitter 
(PBS) in the H-V basis. 

2.3. 'Compiling' 

This basic optical circuit for Grover's algorithm may be 
simplified considerably by consolidating some of the opti- 
cal transformations. For example, because we are free to 
choose the order in which the WH transforms are applied 
to the polarization and spatial modes (i.e., these opera- 
tions on different qubits commute), we may move the 
HWP's in paths a and b after the second BS, and com- 
bine them with elements in the second interferometer — 
the HWP-7ry-HWP combination in path a' is equivalent 
to a single HWP oriented along 45° , and the HWP-HWP 
combination in path b' yields the Identity transformation, 
i.e., no element at all. After a few other consolidations of 
various phase shifts, the optical circuit of figure la may 
be simplified to that in figure lb. 

To understand the device performance, we calculate, 
for example, the probability that a photon will exit to 
detector 1, by summing the amplitudes of the four pos- 
sible paths, and taking the absolute square: 

p(1) = ^T2 AaV T2T2 + T27 = 2 Abv{ - 1) 7 = 2T2 
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where the A's represent the action of the Oracle, and each 
path's amplitude is calculated starting at the output (i.e., 
the first factor in each term represents transmission or 
reflection at the last non-polarizing beamsplitter). The 



2 



Oracle adds a relative phase of n to the amplitude as- 
sociated with the marked element of the database, while 
leaving the others unchanged. We see that for the condi- 
tion {A a u=-1; A aV =A bH =A w =l}, P(l)=l; otherwise, 
if any of the other amplitudes received the 7r phase shift 
instead, P(1)=0. Thus, a click at detector 1 unambigu- 
ously determines that the marked database element was 
|00). Similarly, one can show that P(2)=l for A a y=-\, 
P(3)=l for A m =-1, and P(4)=l for A bv =-l. 
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FIG. 2. Schematic of the self-stabilized optical setup used 
to implement Grover's algorithm. Inset: Oracle. 

3. Experimental Realization 

3.1. Stabilization and the 'Oracle' 

One experimental constraint in any practical implemen- 
tation is that the interferometer path lengths must be 
kept equal modulo 2tt to have the desired transformation. 
Instead of incorporating active stabilization, we chose to 
use a more robust interferometer geometry, based on dis- 
placed Sagnac interferometers. In the usual Sagnac in- 
terferometer, the interfering paths arise from light prop- 
agating clockwise (CW) and counter-clockwise (CCW) 
through the system; because the optical path lengths are 
identical for both directions, the interferometer is auto- 
matically stabilized. The disadvantage is that one can- 
not independently address the CW and CCW modes - 
any optical element in one mode is automatically in the 
second as well. Using a displaced geometry we can main- 
tain the stability advantages of the usual Sagnac design, 
along with the ability to independently affect the CW 
and CCW modes. The resulting experimental setup is 
shown in figure 2 [| 



2 In actuality, the HWP (oriented at 45°) in the second in- 
terferometer acts on three of the paths instead of just one, 
ensuring that a photon horizontally-polarized in one of the 



The inset to figure 2 shows one implementation of the 
Oracle, which requires no moving parts PI and which was 
used to obtain the data presented here. It consists of 
a Pockels cell (PC) [Lasermetrics #Q1059], which acts 
as a piece of glass when no voltage is applied, and as a 
HWP oriented with the fast axis horizontal (i.e., H^H 
and V— *-V) when a voltage of 3.9kV is applied; a liq- 
uid crystal phase retarder (LC) [Meadowlark #LRC-200- 
700], which acts as a piece of glass when a voltage of 5.6V 
is applied, and as a HWP with horizontal fast axis when 
a voltage of 2.2V is applied; and a quartz rotator, which 
rotates any linear polarization by 90°. Consider, for ex- 
ample, the transformations when the applied voltages are 
OkV and 2.2V: 

aH -> aH -► aH ; bH -> bH -> bV -> -bV 
aV -> -aV -> -aV ; bV -> bV -> -bH -> -bH . (2) 

The input state aH = |00)' is the only one to acquire a 
net relative tt phase shift. Similarly, the other three com- 
binations of voltages on the Oracle components each ap- 
ply the phase shift to a different element of the database. 
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FIG. 3. Results obtained with the setup in figure 2. 

3.2. Results and Extensions 

The system in figure 2 was tested by directing a 
horizontally-polarized beam from a 670-nm laser diode 
into the interferometer, and monitoring the output in- 
tensities for the four different settings of the Oracle. The 
results are shown in figure 3. The circuit essentially per- 
formed as expected — the setting of the Oracle (i.e., the 



retro-reflectors will be vertically-polarized in the other. Any 
birefringent phase-shift from the total internal reflections is 
thus the same for all four trajectories through the system, 
and factors out of the final result. This is a practical ex- 
ample of "bang-bang" quantum control Jl5fl . Also, we used 
the beamsplitter and mirrors at closer to normal incidence to 
reduce polarization-dependences. 

3 Oracles that rely on insertion or rotation of a waveplate 
would necessitate constant realignment of the interferometer, 
due to slight wedges and wavefront anisotropies typical in 
these elements. 
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special element of the database) could be determined ac- 
curately with a single query 0. The average probability 
of error for a given port, as given by the relative output 
intensities, was less than 2.8%, and is mostly due to slight 
wavefront distortions introduced by the Oracle elements. 
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FIG. 4. Optical realization of Grover's algorithm for n=3 
bits. A horizontally-polarized photon (polarization qubit = 
'0'). The numbers represent the qubits of the spatial modes 
at various stages of the computation; the x represents the 
value of the polarization qubit. (a) The uncompiled version, 
(b) A compiled implementation (but not yet consolidated to 
make multiple use of redundant components). A photon has 
a 25/32 = 0.78 probability to exit via the port corresponding 
to the database element marked by the Oracle, and a 1/32 
probability to exit via each of the other seven outputs. 

It should be possible to extend the current work to a 
greater number of bits n and a correspondingly larger 
database. One could use different frequencies of light, 
different orbital angular momentum modes |l6| ], or even 
different photon occupation numbers. However, the most 
straightforward extension is simply to add extra spatial 
modes (via beamsplitters), so that, for example, whether 
the photon is transmitted at the first BS defines the first 
bit, whether it is transmitted at the next BS becomes 
the second bit, and so on. In figure 4a we show the di- 
rect optical coding of the Grover algorithm for a 3-qubit, 



8-element database, requiring 63 optical elements. One 
immediately sees the major limitation of these all-optical 
schemes, namely, that the number of optical elements 
grows as ~ 2" []. However, this may be mitigated to 
some extent by 'compiling' the algorithm (see figure 4b). 
We have shown that, in fact, the requisite number of 
elements may be reduced to 21 or less, by making re- 
dundant uses of some of the components. It is an open 
question how to achieve the maximal reduction, and to 
what extent reduction in an optical circuit implementa- 
tion corresponds to reduction with other 'hardware'. 

4. Discussion 

It is natural to ask what features of quantum computa- 
tion are embodied in our all-optical implementation of 
Grover's algorithm. In particular, we have seen that we 
can use different degrees of freedom to represent individ- 
ual qubits, and that we can readily prepare superposition 
states. And although there are no CNOT gates in this 
particular algorithm, the conditional phase shifts applied 
in the amplitude-enhancement procedure, and by the Or- 
acle itself, serve to entangle the different degrees of free- 
dom. That one can so easily achieve such entanglement is 
one of the advantages of the all-optical implementations 
of quantum circuitry. It is related to the fact that the op- 
tical implementation is much easier for operations that 
transform a given state of the database (e.g., applying 
a conditional phase shift to one element), because each 
state corresponds to a different physical mode of the sys- 
tem. Conversely, operations that transform a given bit 
become very difficult, requiring ~ 2" _1 optical compo- 
nents (e.g., to flip the polarization qubit requires a HWP 
in half of the paths). Contrast this with the standard 
multi-particle implementations of quantum computers, in 
which operations at the bit-level are more natural, while 
those on the overall states are among the most difficult. 

There has been some confusion and controversy as to 
what extent a state such as that generated by the Or- 
acle is truly entangled. On the one hand, unlike more 
traditional multi-particle entangled states, an entangle- 
ment in multiple degrees of freedom could not be used to 
demonstrate nonlocality, as in tests of Bell's inequalities. 
The reason, however, is not that the states could not vi- 
olate a suitable Bell's inequality - they can [J rather, it 



4 While our experiment used many photons simultaneously 
for convenience, the identical results are predicted if single 
photons were used instead, i.e., only a single photon is needed 
to search the database. Our laser beam may be thought of as 
many noninteracting copies of identical quantum computers, 
just as each individual molecule in the bulk NMR schemes is 
like a separate 'computer', effectively isolated from the rest 
of the sample M . 



5 Curiously, implementations using bulk NMR have a similar 
limitation, because the signal to noise for n spins (bits) drops 
as 1/2™, due to the decreasing likelihood that all bits (which 
are in a thermal distribution) start off in the ground state 
||. In contrast, our photons start off in a very pure state. 
Proposed schemes for ultracold NMR computers might also 
avoid this limitation |Tij |. 

6 Because the polarization and spatial mode are commut- 
ing observables, they can both be determined simultaneously, 
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is that there is no way to achieve the space-like sepa- 
ration of the entangled systems necessary to satisfy the 
underlying assumptions of Bell's inequalities. So, in this 
sense our entanglement is fundamentally different than 
multi-particle entanglement . On the other hand, the 
multiple degree-of-freedom states do satisfy the usual the- 
oretical criteria for entanglement |Q. For example, if 
we trace over one of the systems (for instance, the polar- 
ization), the other system is left in a completely mixed 
state. Experimentally, this means, e.g.,, that the final 
polarization analysis is required for the interference to 
be observed. 

An interesting possibility for extending the capabili- 
ties of the present techniques is to incorporate the true 
entanglement | ft9[ (and even /ij/per-entanglement in sev- 
eral degrees of freedom [^0|) that exists between cor- 
related photons produced via spontaneous parametric 
down-conversion (or, indeed, via other quantum com- 
puter embodiments). For instance, it was recently shown 
that one could distinguish all four polarization Bell states 
using only passive linear elements, if the photons were si- 
multaneously entangled in energy or momentum pl[ . 

Another major advantage of the all-optical methods is 
the virtual lack of decoherence, stemming from the fact 
that there are no preferred bases (e.g., the H/V polariza- 
tion basis is not preferred to 45/-45). However, we can 
produce an adjustable decoherence simply by increasing 
the interferometer path-length imbalance relative to the 
coherence length of the light. This technique was re- 
cently used to prepare an arbitrary mixed state of polar- 
ization p^ ] , and to investigate optically various schemes 
for quantum control of decoherence |H],|2j| . 

Finally, we note that by combining these all-optical 
techniques with the ideas of 'interaction-free measure- 
ments' [^4[^5), one can demonstrate a remarkable pre- 
diction by Jozsa that a quantum computer can yield an 
answer without ever actually running J2(|! The simplest 
version is to insert our entire circuit (minus the PBS's and 
detectors) into one arm of a Mach-Zehnder interferome- 
ter, such that the mode from the empty arm of the Mach- 
Zehnder is recombined with the '00/01' spatial-mode out- 
put of our system. A single horizontally-polarized pho- 
ton is input to the Mach-Zehnder, and the length of the 
empty arm is adjusted to give complete destructive inter- 
ference for one output port of the recombining BS, when 
'00' is the marked element of the database (see figure 5a). 

If instead '01' is the marked element, a photon exit- 
ing our Grover circuit would be vertically-polarized, so 
no interference occurs at the recombining BS: a detec- 
tor in the previously 'dark' output port now fires half 
the time. If the photon's polarization is vertical (1/2 of 



the time), we know the photon took the path contain- 
ing the quantum computer (i.e., the Grover circuit 'ran') 
and that '01' was the marked element. However, 1/4 
of the time, the photon exiting the 'dark' port will be 
horizontally-polarized (figure 5b). In this case, we know 
the marked element is not '00' (otherwise the destruc- 
tive interference would have kept this port 'dark'), and 
that the photon absolutely did not take the interferome- 
ter path containing the Grover circuitry. If it had, either 
the photon would have vertical polarization (if the spe- 
cial element were '01') or the photon would have left the 
Grover system by its other output port (if the special el- 
ement were '10' or '11'). Hence, 1/4 of the time we will 
have answered the question "Is the marked element of the 
database not '00'?" without ever running the computer. 
By incorporating high-efficiency schemes for interaction- 
free measurements |p5| , one can in principle arbitrarily 
decrease the probability that the Grover circuitry is ac- 
tually run if the marked element is not '00'. Note this 
is an intrinsically quantum mechanical effect, relying on 
the indivisibility of a single photon. Note also that al- 
though the photon may not have actually traversed the 
search algorithm optics, their alignment is still critical, 
and, for example, the electrooptic Oracle elements still 
require power. 
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the former with a simple polarizer, the latter with a (non- 
polarizing) beamsplitter of arbitrary reflectivity. 



FIG. 5. Incorporating 'interaction-free' measurements, (a) 
The interferometer is adjusted so that port 2 has complete 
destructive interference if the Oracle setting is '00'. (b) If the 
Oracle setting is '01', then the exiting photon has vertical po- 
larization, and no interference occurs - a detector in port 2 
can now fire, indicating that the Oracle setting is not '00'; half 
the time the photon in port 2 will nevertheless still have hor- 
izontal polarization, indicating that the quantum algorithm 
did not actually run. 

In summary, we have demonstrated an all-optical real- 
ization of Grover's search algorithm. Because the qubits 
in our system are represented by different degrees of free- 
dom, instead of separate quanta, many of the gate oper- 
ations are much simpler to implement. We stress that 
our results are completely different than simply perform- 
ing a (digital) calculation to predict the behavior - ours 
is a physical system that relies on superposition, inter- 
ference, and non-factorizable states to function. Since 
these may also be classical phenomena, we conclude that 
many ingredients of quantum algorithms are not neces- 
sarily non-classical. The role of 'true' entanglement is to 
provide an exponential savings in resources. However, by 
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compiling the optical circuity, algorithms involving sev- 
eral bits may be readily investigated. 
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